{"id":"01M6MYE6EWNJYH297FNV24DS3N","product_id":"01M6MYE62V9WWRGW7DK73H8DEW","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"NCC tests in 2016 found Cayla could be used for audio playback and listening over Bluetooth while switched on and not already paired.","body_md":null,"method":null,"source_method":null,"sources":[{"title":"#Toyfail technical findings","url":"https://storage02.forbrukerradet.no/media/2016/12/toyfail-report-desember2016.pdf","publisher":"Norwegian Consumer Council","publishedAt":"2016-12-06"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Removed malicious, always-on microphone, exfiltration and guessed-severity labels. This is not independent device verification.","created_at":1793851857372,"updated_at":1793917832000,"slug":"genesis-toys-my-friend-cayla","vendor":"Genesis Toys","model":"My Friend Cayla","category":"toy","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYE6EWNJYH297FNV24DS3N","product_url":"https://isitspying.com/p/genesis-toys-my-friend-cayla","findings":[{"id":"accuracy:01M6MYE6EWNJYH297FNV24DS3N:0","report_id":"01M6MYE6EWNJYH297FNV24DS3N","kind":"security_vulnerability","severity":"unrated","detail":"Bluetooth pairing lacked authentication in the tested toy.","ai_model":null}],"contacted_hosts":[],"evidence":[]}